OpenControls Logo

STIG Viewer

STIGViewer Support

The DNS server implementation must synchronize system clocks within and between systems or system components.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-263645SRG-APP-000920-DNS-000320SV-263645r982097_ruleCCI-004922medium
Description
Time synchronization of system clocks is essential for the correct execution of many system services, including identification and authentication processes that involve certificates and time-of-day restrictions as part of access control. Denial of service or failure to deny expired credentials may result without properly synchronized clocks within and between systems and system components. Time is commonly expressed in Coordinated Universal Time (UTC), a modern continuation of Greenwich Mean Time (GMT), or local time with an offset from UTC. The granularity of time measurements refers to the degree of synchronization between system clocks and reference clocks, such as clocks synchronizing within hundreds of milliseconds or tens of milliseconds. Organizations may define different time granularities for system components. Time service can be critical to other security capabilities such as access control and identification and authentications depending on the nature of the mechanisms used to support the capabilities.
STIGDate
Domain Name System (DNS) Security Requirements Guide2024-07-02

Related Frameworks

1 mapping across 3 frameworks
SCF0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (1) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

MON-07.1Synchronization With Authoritative Time Source
0.50
NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (14) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

AC-2(3)Disable Accounts
1.00
AU-8Time Stamps
1.00
AU-8(1)Synchronization with Authoritative Time Source
1.00
AU-8(2)Secondary Authoritative Time Source
1.00
AU-9Protection of Audit Information
1.00
CM-6Configuration Settings
1.00
CM-6(1)Automated Management, Application, and Verification
1.00
IA-2(6)Access to Accounts —separate Device
1.00
IA-3(1)Cryptographic Bidirectional Authentication
1.00
IA-5(1)Password-based Authentication
1.00

+4 more (top 10 by confidence shown)

CCI1 mapping
CCI-004922
1.00

Details

Check Text (C-263645r982097_chk)

Verify the DNS server implementation is configured to synchronize system clocks within and between systems or system components. If the DNS server implementation is not configured to synchronize system clocks within and between systems or system components, this is a finding.

Fix Text (F-67453r982096_fix)

Configure the DNS server implementation to synchronize system clocks within and between systems or system components.